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Cross-Reference to Related Applications 

5 This application claims the benefit of Provisional Application No. 60/079,802, 

filed March 30, 1998 and Provisional Application No. 60/1 19,230, filed February 9, 
1999. 

Field of the Invention 

10 The present invention relates to financial transaction systems, and more 

particularly, to a system and method for transferring value using compatible, 
electronic value-storing applications. 

Background of the Invention 

15 The use of smart cards is increasing in today's consumer-oriented society. A 

smart card or integrated chip (IC) card is a transaction card, similar in size and 
appearance to credit card, that contains a microcomputer chip. Traditional smart cards 
have a contact interface, such as a metallic contact pad, that is used to communicate 
between the microcomputer on the card and a reader/writer device (RWD) into which 

20 the card is inserted. Thus, traditional smart cards require a physical connection to a 
RWD in order to be utilized. 

The use of smart card technology in the consumer environment places a high 
physical demand on the card and the contact interface, making the required physical 
25 connection undesirable at times. For example, since the metallic contact plate is 

exposed to the environment, it is often subject to oxidation, contamination and other 
physical degradation due to use. This can decrease the reliability of the physical 
connection. 

30 Additionally, the requirement of a physical connection for communications is 

often undesirable in environments where speed and high throughput are demanded. 
For example, a smart card may be used to store value or electronic tokens for mass 
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transit. To use a traditionlTsmart card, each passenger needs to ta^e the time to 
properly orient the card and insert it into a RWD that collects a fare. Further, the rate 
of data transmission through the physical connection upon proper insertion of the card 
is relatively slow compared to contactless data transmission speeds. Thus, a 
5 traditional smart card requiring a physical connection for data transmission is often 
cumbersome and slow. 

On the other hand, even though the contact interface provides a slower 
communications channel, it does have some other advantages. A contact interface is 
10 very common and only requires an inexpensive reader interface. The inexpensive 
reader interface is readily connected to a home computer, for example, thereby 
increasing the utility of a card that has a common contact interface. Hence, in order to 
integrate a smart card having new technology into the commercial world, it is prudent 
to provide a smart card that is compatible with current contact interface devices, 
y 15 Thus, efforts have been made to overcome the disadvantages of the traditional smart 
^ card having a contact interface by adding an additional contactless interface to the 

93 card. 

m 
y 

^ Current smart cards having both a contact interface and a contactless interface, 

20 however, have a number of disadvantages. For example, one representative contact 
and contactless interface smart card disadvantageously comprises a shared memory 
configuration. This smart card has a traditional microprocessor chip with logic to 
control a contact interface. The contactless interface is also included in the card, but it 
is a separate function that has its own logic. The contactless interface utilizes an 
25 Application Specific Integrated Circuit (ASIC), that has limited computational 

capability because it is designed specifically for one application. Generally, the ASIC 
is hard-wired to perform computations specific to the application programmed on the 
main microprocessor on the prior art card. As such, the ASIC is reasonably secure but 
it has no capability to perform higher order security algorithms, such as the triple-DES 
30 (Data Encryption Standard) symmetric-key encryption algorithm. The ASIC is 

essentially dumb program logic that cannot be readily adapted to other applications. 
Thus, the flexibility of running various applications using this prior art card is 
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contactless interface is inflexible 
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severely limited becauseoie contactless interface is inflexible and only communicates 
with the main microprocessor chip through shared memory locations. 

Also, current smart cards typically utilize an open purse application to transfer 
5 and store value. Examples of open purse applications are VISA CASH® and 

Mondex® payment systems. An open purse application allows value to be transferred 
to and from the smart card, making utilization of the smart card for a transaction very 
similar to utilizing cash. For example, when using a smart card open purse 
application to make a purchase, the card holder simply inserts the card into a RWD. 
10 The RWD allows the card to communicate with a merchant terminal, for example. 
The terminal and card authenticate each other, then the transaction amount is debited 
from the card and credited to the terminal. In turn, the terminal forwards the 
transaction information to a settlement system, which properly credits the merchant 
O account and debits the pool of money associated with transferring the value onto the 

it] 15 smart card. Unlike a credit card transaction, for example, the value transfer occurs in 
a matter of seconds and no receipt needs to be signed. Hence, the value stored in the 
open purse of a smart card is like cash, because it is generic value and can be used at 
any location that supports the particular open purse application. In the United States, 
for example, the VISA CASH® open purse application and settlement system is being 
20 accepted by an ever-increasing number of merchants. An open purse application, 

therefore, becomes more open and the value becomes more generic and like cash with 
the increased acceptance and use of the application. Thus, open purse applications 
can be very powerful methods of transferring value, giving a smart card the ability to 
look and act like cash. 

25 

Open purse applications can be risky, however, because of their similarity to 
cash. The load key, or the encrypted data utilized to authorize and load value into the 
open purse application on a smart card, must be closely guarded. Typically, load keys 
are kept on host system computers or at highly-secure remote terminals or load 
30 devices (e.g. in the Mondex® system). If the load key were to be stolen, then the 
owner of the load key, such as a financial institution, has a great exposure to fraud as 
the stolen load key could be used to improperly add value to a smart card. The 
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improperly added value on the smart card could then be used to pertorm transactions, 
just like cash. Thus, it may be desirable to have a closed purse application that limits 
the ability to load and/or unload value on the smart card. 



5 Although a closed purse application may be helpful to control the transfer of 

value, typical closed purse applications are too limiting. Closed purse applications are 
application-specific, only allowing their value to be used in specific transactions 
approved by the application. This may be advantageous in certain closed 
environments, but generally a consumer does not find this type of restriction helpful. 

10 Thus, a closed purse application does not give the consumer as many options as the 
consumer would like. 



Therefore, a transaction system is desired that overcomes the problems of the 
open and closed purse applications, and also a smart card having both a contact and 
1 5 contactless interface that overcomes the above problems is desired. 

Summary of the Invention 

According to the present invention, a system for performing a financial 
transaction to exchange value comprises a first electronic application for storing 

20 application-specific value and a second electronic application for storing general 

value, where the application-specific value and the general value are each compatible 
within the system to perform the financial transaction. The compatibility is achieved 
by formatting the financial transaction to be compatible with a common settlement 
system, such as a settlement system associated with the second electronic purse. The 

25 financial transaction may be performed utilizing a transaction application, which may 
be part of or associated with the first electronic application. The financial transaction 
may involve the exchange of all or a portion of either the application-specific value or 
the general value, or both. Further, the invention additionally comprises an auto-load 
application that adds new application-specific or general value to the first electronic 

30 application or second electronic application, respectively. The auto-load application 
exchanges general value for application-specific value, or it exchanges value for a 
debit to an associated, outside account. Finally, the system also includes at least one 
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communication interfacWur interacting with the first and second electronic 
applications. The communication interface may include a contact interface, a 
contactless interface or both. 
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5 The above-described features of the system of the present invention may be 

embodied in a smart card that has a memory including the first and second electronic 
applications. The memory of the smart card is interactive with the at least one 
communication interface, as well as with a dual interface microprocessor that 
implements the purse, transaction and other applications of the present invention. 
10 Additionally, the system includes a first terminal for loading value into the first or 
second applications and a second terminal for deducting value from these 
applications. 

One disclosed method for performing a financial transaction with a smart card 
15 comprises storing application-specific value in a first electronic application, storing 
general value in a second electronic application, and performing a value exchange 
associated with the financial transaction wherein the application-specific value and the 
IjJ general value are each exchangeable in the financial transaction. The financial 

$3 transaction involves exchanging at least a portion of one of the application-specific 

!iH 20 value and the general value to perform the transaction, or exchanging at least a portion 
ffi of both the application-specific value and the general value to perform the transaction. 

J The method further includes formatting the financial transaction performed with 

application-specific value for utilization with a settlement system associated with the 
second electronic application. Also, the method includes transferring at least one of 
25 the application-specific value and the general value through a communication 

interface in communication with at least one of the first electronic application and the 
second electronic application. Performing the value exchange includes utilizing a 
transaction application, that may be stored on a smart card or on a transaction 
terminal. Additionally, the method includes exchanging all of the application-specific 
30 value, automatically loading new application-specific value, and exchanging at least a 
portion of the new application-specific value to complete the financial transaction. 
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In another embodiment, the present invention is a system for performing a 
financial transaction that includes a smart card storing value and a purchase device for 
removing value from the smart card. The smart card includes a memory for storing a 
first application having application-specific value and a second application having 
5 general value. The application-specific value and the general value are compatible for 
performing the financial transaction and are secured by encryption on the smart card. 
The purchase device includes a first purchase key for use in removing application- 
specific value from the first application and a second purchase key for use in 
removing general value from the second application. Both the first and second 
10 purchase keys are security mechanisms for accessing encrypted information, such that 
the purchase device is adapted for communication with the smart card to transfer at 
least one of the application-specific value and the general value in the financial 
transaction. Also, the first application generates a first set of transaction information, 
O including the application-specific value, and the second application generates a second 

fU 1 5 set of transaction information, including the general value, for use in the financial 
it* transaction. The invention includes the first set of transaction information being 

■J; formatted for processing like the second set of transaction information. Additionally, 

W this system includes a funding source for receiving funds in exchange for transferring 

□ at least one of the application-specific value and the general value to the smart card. 

■jvJ 20 Also, the system includes a settlement system for accounting for the flow of 
"ST 1 application-specific value and general value among the smart card and the purchase 

=D device in order to settle the financial transaction. 



Brief Description of the Drawings 

25 Fig. 1 is a schematic representation of the system of the present invention; 

Fig. 2 is perspective view of one embodiment of a dual interface smart card; 

Fig. 3 is a flow chart representing steps in performing a typical value- 
exchange transaction utilizing the system and apparatus of the present invention; and 

Fig. 4 is a schematic representation of a transaction network according to the 
30 present invention. 
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Detailed Description onne Invention 

According to a preferred embodiment of the present invention, referring to 
Figs. 1 and 2, a system 10 for exchanging value comprises a dual interface smart card 
12 having a contact interface 14 and a contactless interface 16 in communication with 

5 an external contact reader/writer device (RWD) 1 8 and an external contactless 

reader/writer device (RWD) 20, which may each be in communication with back end 
computer systems 22. Both contact interface 14 and contactless interface 16 are 
interactive with dual interface microprocessor 24, which contains the functionality to 
communicate with each interface. Dual interface microprocessor 24 further comprises 

10 memory 26 for storing data and application programs. Memory 26 comprises 
application programs such as an open purse application 28 and a closed purse 
application 30 that allow for controlling an exchange of value through either contact 
interface 14 or contactless interface 16. Open purse application 28 enables the 
exchange of general value 32, while closed purse application 30 enables the exchange 

15 of application-specific value 34. Thus, dual interface card 12 utilizes dual interface 
microprocessor 24 to control the exchange of value from open purse 28 and closed 
purse 30 through contact interface 14 and contactless interface 16. 

The term "general value" comprises value that is generally equivalent to cash 
20 in that the general value is readily accepted in a plurality of financial transactions. 
The term "application-specific value" comprises value that has limited acceptance, 
typically only for transactions associated with a specific application loaded onto the 
smart card. General value may be accessed by a specific application program and 
converted into application-specific value. Similarly, application-specific value may 
25 be able to be converted to general value. Alternatively, certain applications may limit 
or prohibit the conversion of their associated application-specific value to general 
value, such as entitlement program applications. Thus, while general value and 
application-specific value may be readily exchanged, the specific application program 
may provide specific rules governing the limits of the exchange. 

30 
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Also, the term "purse" as used in this application refers to an application 
programmed within the memory of the smart card that stores and transfers value. 
There may be a plurality of purses within each smart card. 



5 Back end computer systems 22 comprise all communications and processing 

services necessary to complete, settle, report and manage the transaction and the 
support services required to maintain system integrity. As examples, these services 
include but are not limited to: terminal acquisition and processing (both purchase and 
load); funds authorization and load authentication services; network communications, 

10 including communications concentrators, protocol converters, and interchange 

networks; clearing, settlement and funds movement processing and reporting; card 
management, security services and device and asset management and maintenance. 

Dual interface smart card 12 is similar to a traditional transaction card, like a 
15 credit card, debit card, etc. Dual interface smart card 12 is thin, portable and easily 
carried in a wallet or pocket. The above-mentioned components of dual interface 
smart card 12 may be encapsulated within substrate 36, or alternatively laminated 
between layers of the substrate, such as a plastic or the like. 

20 Dual interface microprocessor 24, in combination with contact interface 14 

and contactless interface 16, comprise interface circuitry that advantageously provides 
smart card 12 with an integrated contact and contactless functionality. Dual interface 
microprocessor 24 further includes a central processing unit (CPU) 38 that manages 
data and runs application programs, security logic, sensors and interface management 

25 applications 40, and a co-processor 42 that provides additional processing capability. 
For example, co-processor 42 may be a Triple-DES (Data Encryption Standard), a 
crypto-public key (PK) co-processor, or other similar encryption co-processor that 
provides security for communications utilizing both contact interface 14 and 
contactless interface 16. Also, memory 26 may comprise memory units in the form of 

30 random-access memory (RAM) 44, read-only memory (ROM) 46 and electrically- 
erasable programmable read-only memory (EEPROM) 48. CPU 38 and memory 26 
are capable of respectively processing and storing data and signals representative of 
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algorithms, such as software programs. A suitable dual interface microprocessor 24 
having the above-mentioned components is the MIFARE PRO microprocessor 
manufactured by Philips Semiconductors. Also, a similar dual interface chip is 
available from Siemens. Dual interface microprocessor 24 runs on 5 volts or less of 
5 electricity, which may be provided through external sources, as is described below. 

Dual interface microprocessor 24 advantageously comprises algorithms and 
software applications that may be utilized with either contact interface 14 or 
contactless interface 16. Dual interface microprocessor 24 operates under firmware 

10 controlled by its internal read-only memory and formats data and interprets 

commands between contact interface 14 and contactless interface 16. Dual interface 
microprocessor 24 beneficially allows the same firmware and software applications to 
be utilized in conjunction with either contact interface 14 or contactless interface 16. 
Utilization of the same application advantageously eliminates the need for separately 

15 programmed applications for each interface to perform the same function, saving 
space within memory 26 and reducing the cost of supplying card 12 with operating 
applications. 

Contact interface 14 manages the data communication between CPU 38 and 
20 contact RWD 18. Contact interface 14 preferably comprises a plurality of electrically- 
conducting contact plates 50 that provide a connection for input/output 
communications with dual interface microprocessor 24. Contact plates 50 are adapted 
to mate with a corresponding contact connector 52, such as electrically-conducting 
prongs or plates, coupled to contact interface 54 on contact RWD 16. Details 
25 concerning the specifications for such a contact interface are found in International 
Standards Organization (ISO) standard number ISO 7816. Thus, data and signals are 
transferred between smart card 12 and contact RWD 18 through the electrical 
connection established by mating contact plates 50 and contact connector 52. 

30 Use of contact interface 14 advantageously provides a secure communication 

channel, as microprocessor 24 includes secret keys and encryption algorithms to 
protect access to CPU 38 and memory 26. In communicating with contact RWD 18 
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through contact interfac^4, microprocessor 24 performs verification and 
authorization algorithms to insure the communication with the contact RWD is 
proper. A typical contact-to-contact connection, such as between contact interface 14 
and contact interface 54, allows data transfer at a rate of about 9.6 kilobits (kb) per 
5 second. Contact interface 14 is preferably used to load value and application 
programs onto card 12, such as through local terminals and home computers 
connected to a contact RWD 18. Contact interface 14 is generally preferred over 
contactless interface 16 for loading value because of the long transaction times. For 
secure processing, such as is required for loading value, the keys are longer and thus 

10 require a transaction time for key interchange and transaction data interchange. As 
such, the reliability of the communication channel provided by contact interface 14 is 
desired. Additionally, one of the plurality of contact plates 50 of contact interface 14 
may be connected to circuitry that powers microprocessor 24 from a power supply 56 
associated with contact RWD 18. Further, contact RWD 18 may include a processor 

15 58 and a memory 60 for processing and storing electrical signals and data 
representative of algorithms and applications. 

Similarly, contactless interface 16 manages the data communication between 
CPU 38 and contactless RWD 20. Advantageously providing a relatively fast 

20 communications interface compared to contact interface 14, contactless interface 16 
advantageously transfers data at a rate of about 106 kb per second. This high data 
transmission rate is desirable in applications requiring the communication between 
card 12 and the external contactless RWD 20 to be completed in a very short time 
period, such as with transportation-related applications like fare or toll collection. 

25 Although contactless interface 16 offers high speed, it is typically not used for loading 
value onto the card because of the long transaction times. Even though the 
communications are faster, contactless interface 16 is typically not fast enough to 
transfer the secure information and transaction data that is passed by contact interface 
14 in a normal contactless transaction time. A contactless transaction time begins 

30 when the card is in proximity of contactless terminal, and is completed in the amount 
of time it takes to touch the card to a designated spot on the terminal. Also, the 
reliability of a long, contactless communication may be jeopardized by deflecting the 
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card at an angle to the tefminal touch spot at any time during the touch. Thus, 
contactless interface 16 provides a very fast communications channel, but may not be 
currently suitable for processing in very short transaction times the required 
information for a highly secure transaction. As one skilled in the art will realize, 
however, these constraints for both contact and contactless interfaces are due to the 
limitations of currently available terminal and chip technology. 
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Contactless interface 16 preferably comprises a radio frequency (RF) antenna 
58 having a coil of wire with an appropriate nvdfnber of turns and diameter to tune the 
10 antenna to operate at a given frequency, such as 13.56 Mhz. Contactless interface 16 
preferably meets the specifications for a contactless interface as set forth in the ISO 
standard number ISO 14443. Contactless RWD 20 has a corresponding contactless 
interface 64 having a similar RF antenna 6® tuned to operate at the same frequency. 
RF antenna 66 on contactless RWD 20 is ppwered by a local power supply 68 to 
15 generate an electromagnetic field, where spme of the generated magnetic flux flows 
through RF antenna 66 on card 12 and thereby induces a voltage. The voltage drives 
an electrical current that powers microprocessor 24 and a system clock on card 12. 
Further, contactless RWD 20 may include a processor 70 and a memory 72 for 
processing and storing electrical signals and data representative of algorithms and 
20 applications used to communicate witll card 12. The operating range of contactless 
interface 16 may vary, but preferably /the contactless interface allows smart card 12 to 
communicate with a compatible coniactless RWD 20 in a proximity range of at least 
about 10 cm. Utilization of contactless interface 16 is advantageous because the 
contactless interface does not require a physical engagement of card 12 to a contact 
25 RWD, and also because the rate of data transfer is faster, thereby improving 

throughput. Additionally, the use of contactless interface 16 beneficially avoids use 
of contact interface 14, reducing wear and tear and associated degradation of contacts 
plates 50. Further, similar to contact interface 14, communications utilizing 
contactless interface 16 are secured utilizing secret keys and encryption algorithms to 
30 protect access to CPU 38 andf memory 26. Thus, the contactless functionality 
increases the convenience and ease of use of card 12. 
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Dual interface sTSSft card 12 preferably comprises numerous applications for 
holding and exchanging value. As mentioned above, two types of such value- 
exchange applications are open purse application 28 and closed purse application 30, 
stored within microprocessor 24. There may be a plurality of each type of application 
28 and 30 stored on a single smart card 12. The applications are preferably stored 
within EEPROM memory 48, thereby advantageously allowing the holder of smart 
card 12 to control the loading and unloading of the applications. 

Open purse application 28 is an application that stores general value 32 that 
may be accessed by other applications to pay for all types of goods and services. Use 
of open purse application 28 is extremely flexible, as it may be accessed through 
either contact interface 14 or contactless interface 16, utilizing microprocessor 24 and 
secured by encryption capabilities performed by co-processor 42. Communications 
with open purse application 28 are in a common format, as is explained below, 
thereby allowing multiple external devices and applications to perform transactions 
utilizing the open purse application. Examples of a suitable open purse application 28 
include VISA CASH® payments, Mondex® payment systems, and other similar 
applications that provide for the storage and exchange of general value 32. 

Closed purse application 30 is an application that stores application-specific 
value 34 that may be accessed only by a specific application, or a limited number of 
specific applications, to pay for application-specific goods and services. Similar to 
open purse application 28, the use of closed purse application 30 is extremely flexible, 
as it may be accessed through either contact interface 14 or contactless interface 16, 
utilizing microprocessor 24 and secured by encryption capabilities performed by co- 
processor 42. According to the present invention, communications with closed purse 
application 30 are in a format compatible with the open purse application format, as is 
described in more detail below, thereby allowing multiple external devices 
programmed with the same application to perform transactions utilizing the closed 
purse application. 
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Each of the possTWe plurality of open purse application 2Sand closed purse 
application 30 has an associated bin number, load key, unload key and purchase key. 
The bin number is a special number or other equivalent designator that is associated 
with a particular closed or open purse application. The bin number for each open or 
5 closed purse application is unique, and is associated with each transaction utilizing the 
application in order to properly settle the transaction. The load key, unload key and 
purchase key are used to control the input and removal of value. Only the load key 
associated with a particular application 28, 30 may be utilized to load value into that 
application. Similarly, only the unload key associated with a particular application 
10 28, 30 may be utilized to unload value from that application to the cardholder's 
general account. The load key and unload key are typically controlled by a very 
secure, central host, such as that associated with a financial institution. Alternatively, 
the load key may be kept in the load device. Also, only the purchase key associated 
O with a particular application 28, 30 may be utilized to remove value from that 

jy 1 5 application in a purchase transaction. The present invention utilizes the various keys 
m to control and restrict loads and purchases. 



Associated with each type of application 28, 30 is an authentication system 80 
(Fig. 4), such as a secure terminal in communication with a financial institution, that 
20 holds the specific load and unload key for that application. Similarly associated with 
each application 28, 30 may be a purchase system 82 (Fig. 4), such as a merchant 
terminal, that holds the purchase key for that application. 



A load key and an unload key may be a very limited, highly secure key or a 
25 more easily obtained key. A limited key may include a load key associated with an 
open purse. A limited load key restricts the ability of loading general value 32, which 
may be utilized like cash, to only the special entities in the system that are authorized 
to distribute such value. Conversely, a more readily obtained load key may be a load 
key for some types of closed purse application 30. A more readily obtained load key 
30 may be desired in order to facilitate the loading of certain types of value into an 
application. For example, it may be desired to allow value from any open purse 
application or value from other designated closed purse applications to be readily 
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transferred to and converoa to application-specific value 34 in closed purse 
application 30. In this case, the load key for closed purse application 30 is readily 
obtainable, with the appropriate clearances, and stored within open purse application 
28 and other closed purse applications in order to enable these applications to transfer 
value into closed purse application 30. 



Similarly, the purchase keys associated with each application 28, 30 may be 
widely available or restricted. A purchase key associated with open purse application 
28 is generally widely-available, therefore enabling the value in the open purse to be 
10 readily exchanged to anyone having the purchase key. On the other hand, the 

purchase key associated with closed purse application 30 is generally limited, with 
distribution of the purchase key only to entities associated with the specific 
application associated with the closed purse. So, for example, the purchase key for a 
G transit application may only be contained within fare terminals, buses, subways, 

|tj 15 parking meters, etc. associated with the transit application. If a merchant terminal at a 

food store attempted to access the value stored in the transit application, then the 
W merchant terminal would be denied because it would not contain the proper purchase 

-~ z 
££ s_t 

j fj key. Control over the load and purchase keys may also be advantageous in certain 

m applications such as welfare programs, electronic benefits, entitlement programs, 

|«| 20 school lunch programs, and any other similar program where it is desirable to restrict 
m the withdrawal of value from a specific closed purse application to a limited number 

of entities who would be given the purchase key for that application. Also, informal 
closed purse applications may be programmed on the smart card. These informal 
applications allow, for example, a parent to give a child the smart card with a 
25 predetermined value loaded in the purse, thereby limiting the amount the child may 
spend to the predetermined value. Similarly, other informal applications include a 
restricted access purse, such as for use only for a bus ride or a school lunch. More 
formal, restricted access applications include welfare, food stamps, special employee 
benefit applications, and other similar entitlement programs. Thus, the present 
30 invention utilizes control over the distribution of the load key and purchase key 

associated with each application 28, 30 to provide a robust, integrated system suited 
for all types of transactions. 
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For example, as mentioned above with open purse application 28, the load key 
is typically held within a host computer in a financial institution or within a remote 
terminal in a secure location or in the load device. In order to load value into open 
5 purse application 28, then, the card holder must place the card into communication 
with these funding sources. 

An example of closed purse application 30 is a metropolitan transit application 
(MTA) 74 having a transit purse 76 that stores transit value 78 that may be used to 

10 pay for transit services. A transit service may include various services applicable to 
MTA 74, such as bus, train, subway, parking and toll charges. For example, a 
cardholder may load transit value 78 into transit purse 76, such as through the Internet 
or by using a contact or contactless smart card RWD 1 8 or 20, respectively. The 
cardholder may insert money into device 18, 20, enter a checking, savings or credit 

1 5 account number to debit, or access open purse application 28 to pay for a designated 
amount of transit value 78 to be transferred to transit purse 76. Then, when using the 
subway for example, the cardholder passes card 12 within the proximity of contactless 
smart card RWD 20. Card 12 and contactless RWD 20 interrogate each other for 
authentication and verification purposes, and then MTA 74 is utilized to initiate a 

20 transfer of transit value 78 to pay for the subway ride. 

A number of alternatives exist for the fare determination and debiting: (1) 
debiting the card for a maximum fare upon entry, and then crediting the card an 
amount based upon the exit point or time; (2) partially debiting the card upon entry, 
25 such as with the minimum fare, and then further debiting the card upon exiting, if 
necessary, based on distance or time; and (3) placing a data tag in the card indicating 
the entry time and/or entry point, and then recalling this entry data tag and comparing 
it to a similar exit data tag to determine the fare and debit the card. Many other 
similar fare determination methods will be evident to one skilled in the art. 

30 

Also, MTA 74 may support a negative value operation. For example, MTA 74 
comprises a transit product file having a record which corresponds to open purse 
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application 28. This is wnere, for example, the entry data tag ana exit data tag 
discussed above may be managed. For example, in the fare by distance scenario, the 
interaction between the card and the terminal device at the entry point, through MTA 
74, can identify value in a purse. MTA 74 identifies that sufficient value to gain entry 
5 exists within either the closed purse application 30 or open purse application 28. 
Upon exiting, MTA 74 compares exit data tag and entry data tag and determines the 
fare. If closed purse application 30 or open purse application 28 contains sufficient 
value to cover the fare, then the fare is debited and the cardholder exits normally. If 
sufficient value does not exist on the card, then the cardholder is notified of the 
10 deficiency, such as by an audible or visual indicator, and then permitted to exit. A 
record of the deficiency, however, is kept within MTA 74. The cardholder can then 
use a normal load-value machine to add value to the appropriate purse 28 and/or 30. 
The next time the cardholder uses a purse 28, 30 to pay for a ride the deficiency is 
collected before the current fare is deducted. 
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Since the cards are purchased at a fixed price, it is not likely that a rider would 
dispose of their card just because of the negative balance. Card replacement is more 
expensive than paying-off the negative balance. Also, paying-off the negative value is 
encouraged by the price differential between minimum and maximum fares, where the 



;:H 20 price differential is typically less than the fixed price of a card. Thus, it is believed 

IU 

ill that the risk for loss based on negative value operations is low. 



Also, negative value operation improves service levels and rider throughput 
compared with the current systems. Looking at the queuing model for gated 
25 operations, people tend to arrive at random intervals, where the concentrations varying 
by time of day and local event schedules. On exit, however, the distribution has more 
peaks. The peaks are associated with the arrival of a transit vehicle and the massive 
queuing of riders immediately after debarkation. Furthermore, this system is 
advantageous in that no actual financial transaction is required at the point of entry. 



30 



Once the fare amount is determined, MTA 74 debits transit purse 76 for an 
amount of transit value 78 associated with the fare, and transfers that amount of transit 
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value 78 relating to the^He to contactless RWD 20. In turn, conmctless RWD 20 may 
transfer all of the collected transit value 78 to back end computer systems 22 
associated with the authority controlling the transit service. As one skilled in the art v 
will realize, similar transactions may also occur utilizing contact RWD 18. 

In a case where insufficient transit value 78 exists in transit purse 76 to pay for 
the fare, MTA 74 may then look to open purse application 28 to make up for the 
discrepancy. MTA 74 may debit the amount of general value 32 in open purse 
application 28 by an amount corresponding to the deficient amount of transit value 78. 
The debited amount of general value 32 is then transferred to contactless RWD 20 and 
back end computer systems 22. Alternatively, the cardholder may have an auto-load 
application 79 associated with the closed purse application 30, such as the MTA 74. 
In this case, auto-load application 79 provides capability to load a previously agreed- 
upon amount of application-specific value 34 to closed purse application 30. The 
auto-load amount of value transferred to closed purse application 30 may come 
directly from the general value 32 stored in open purse application 28. Alternatively, 
the auto-load amount of value may be similar to a pre-approved credit that is debited 
to a checking, savings, credit, debit or loan account through a (off-line or on-line) 
terminal interface. Auto-load application 79 may similarly be incorporated with open 
purse application 28. Thus, auto-load application 79 provides worry-free use of card 
12, as it guarantees that an appropriate amount of general value and/or application- 
specific value will always be available to the cardholder. 

In operation, referring to Fig. 3, a typical value exchange transaction utilizing 
system 10 and smart card 12 may comprise performing a financial transaction at a 
merchant, over the Internet, at a local terminal or with another cardholder utilizing a 
RWD (block 100). A communication channel must be established between smart card 
12 and the corresponding device (block 102). To establish the communication 
channel, the cardholder engages contact interface 14 into contact RWD 18 (blocks 104 
and 106) or places contactless interface 16 in proximity of contactless RWD 20 
(blocks 108 and 110). A bi-directional communication then proceeds between card 12 
and the respective RWD 1 8 or 20 that authenticates and verifies both the card the 
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respective device (bloclm2). At this point, the cardholder maymdicate the amount 
of value involved in the financial transaction, such as if the cardholder is loading 
value onto the card or if a card-to-card value exchange is being performed (block 
1 14). Alternatively, the cardholder may confirm the amount of value involved in the 
transaction, such as if utilizing card 12 in a merchant or Internet transaction. 
Similarly, this part of the transaction process may be implied, such as in 
transportation-related applications where a toll or fare may be charged depending 
upon distance traveled, time of day, customer status (i.e. senior citizen discount, 
preferred traveler), etc. Next, a choice may be made to utilize general value 32 from 
open purse application 28 or application-specific value 34 from closed purse 
application 30 (blocks 1 1 6 and 1 1 8). Again, this choice may be predetermined, 
depending on the application with which smart card 12 is interacting. 

For example, in utilizing smart card 12 in a subway, the interacting RWD at an 
entry gate may automatically initiate a transportation application, such as MTA 74, 
and hence initially look to use application-specific value 34, such as transit value 38. 
In contrast, when inserting smart card 12 into a multi-functional terminal device 
having contact interface 14, the cardholder may be given a choice by the application 
program within the terminal device as to which type of value should be utilized. 

In either case, system 10 and the application program utilized inquire about the 
availability of sufficient value in the chosen application (block 120). If sufficient 
value exists, then the transaction is executed and the value exchange is performed and 
the transaction ends (blocks 1 22 and 1 24). If sufficient value does not exist, then the 
application may permit value from another closed or open purse application to be 
utilized (block 126). This option may be application-specific as some forms of value 
may not be convertible, or may have a limited ability to be converted. For example, 
application-specific value 34 stored in a closed purse application 30 such as for 
entitlement programs, like a welfare program, may be restricted so that the value can 
only be used for transactions utilizing the closed purse application. If another 
application is permitted to be utilized, then the open or closed purse application may 
be chosen automatically, based on a pre-designation, or the cardholder may indicate 
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which application to us^olock 128). The value from the selectedapplication may 
then be directly utilized to execute and end the transaction (blocks 130, 122 and 124), 
or it may be converted to value to be stored in the initial application and then utilized 
to execute and end the transaction (blocks 132, 122 and 124). Alternatively, if 
5 another closed or open purse application is not chosen or permitted to be utilized, 
another option may be to perform the auto-load function, as described above (block 
134). If the auto-load is permitted and/or chosen, then value is added to the initial 
application and the transaction is executed and ended (blocks 132, 122 and 124). If 
the auto-load is not permitted and/or not chosen, then the transaction is ended (block 
10 124). Thus, system 10 provides a simple, convenient and fast value exchange 
transaction utilizing dual interface smart card 12. 



As one skilled in the art will realize, MTA 74 is but one example of a 
multitude of applications that may be stored on card 12. Card 12 may further include 
15 applications relating to identification, building entry authorization, access to 

equipment such as computers, general financial transactions, loyalty applications, 
ticketing and membership applications, entitlement programs, various other transit 
applications relating to planes, taxis, shuttles, tolls, etc., employer programs that 
distribute benefits/entitlements, and many other similar applications. 

20 

For example, according to the present invention, a loyalty application 81 may 
be implemented in association with MTA 74, for example. Loyalty application 81 
comprises an application programmed to interact with MTA 74 to keep track of usage 
by a particular card holder. Loyalty application 81 may track, for example, the 

25 number of times a cardholder has paid for a ride, such as on a subway. Upon reaching 
a predetermined number of paid rides in a certain period of time, such as 15 rides in a 
month, then loyalty application 81 authorizes the equivalent of a pass to ride free for a 
certain time period or for a certain number of rides, such as for the remainder of the 
month or for two free rides. Loyalty application 81 advantageously may be linked to 

30 each purse application within smart card 12, thereby leveraging the infrastructure of 
the loyalty application for all applications. This enables one smart card 12 to be 
utilized for all the needs of a cardholder, eliminating the nuisance of having to carry a 
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different card for each loyalty program. Thus, the loyalty program of the present 
invention beneficially is integrated with each purse application 28, 30 on smart card 




12. 



5 



The loading of the pass or number of free rides may be accomplished by the 



associated program within the terminal with which the card is interacting. For 
example, the terminal may read the card, accessing a loyalty register that maintains 
transaction information related to the card usage for the particular loyalty program. 
The terminal program may then comprise a mechanism to evaluate the dates and the 
10 transaction data to determine if any entitlement has been earned. The terminal 
program may then load the entitlement onto the card into the proper application. 
Alternatively, when an entitlement has been earned, the loyalty program may set a bit 
on the card that indicates a certain "free ride" time period or a certain number of free 
O rides. By centrally locating the evaluation mechanism in the terminal or with a host 

f y 1 5 computer, the parameters for various programs can be quickly and easily changed. 



Another advantageous feature of the present invention is the integration of 
open purse application 28 and closed purse application 30 into a single system. As 
mentioned above, this is accomplished by structuring closed purse application 30 to 

20 be compatible with open purse application 28. Compatibility is enabled by structuring 
the data and transaction information for a particular closed purse application 30 in a 
format compatible with the data and transaction information utilized by the particular 
open purse application 28 being utilized. An identification number associated with 
the card is preferably used to properly direct the closed purse application transaction 

25 information through the established back end computer systems 22 utilized by the 
particular open purse system application 28. In multi-application environments the 
reference numbers associated with an individual card can become quite complex. The 
card itself, or more specifically, the chip silicon has an embedded serial number. This 
is useful for identifying that piece of silicon. However, each application that is loaded 

30 onto the card can also have an identification number attached to it. This is necessary 
in the case of transaction-based applications, such as in the Visa Cash® system where 
the identification number is akin to an account number, such that the devices and 
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backend systems can spSEifically identify and track each instance of the product that 
has been issued. Visa breaks up this number into two parts, a BIN which identifies 
the issuer and a specific program of that issuer and a sequence number which is the 
individual instance of that product. Therefore, the identification number may include 
5 the BIN number and the application instance number, for example. As an open purse 
application 28 like VISA CASH® gains national and worldwide acceptance, this 
compatible structure between open and closed purses powerfully enables smart card 
12 of the present invention to be utilized for virtually all transactions a cardholder 
may wish to perform. Thus, the value-exchange transactions, including those 
10 involving application-specific value, preferably are managed by the open purse 
application transaction system. 

Referring to Fig. 4, one embodiment of a high level process flow according to 
the present invention comprises back end computer systems 22 (not shown) as part of 

15 a load/purchase transaction. Back end computer systems 22 may comprise a 

settlement system 92 in a transaction network 84 for properly settling transactions 
performed utilizing open purse application 28 and closed purse application 30 on 
smart card 12. Transaction network 84 comprises interface and/or connecting 
networks for performing value exchange transactions. Suitable examples of 

20 transaction network 84 comprise networks managed by VISA®, such as the PLUS® 
network for ATM transactions and VISANET® network for point-of-sale (POS) 
transactions. 

Before smart card 12 can be utilized to perform a value exchange transaction, 
25 it must be loaded with value. To load smart card 12 with value, it may need to be in 
communication with funding source 86 through transaction network 84. To 
accomplish this, smart card 12 may be inserted into an on-line or remote terminal 
interface device (not shown) in communication with funding source 86. Funding 
source 86 may comprise a terminal interface or other similar device having access to 
30 funds, such as cash that can be inserted into the terminal device or account numbers 
that can be debited, in exchange for general value 32 (Fig. 1) and/or application- 
specific value 34 (Fig. 1). Further, funding source 86 comprises the process to 
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communicate with authorization system 80 to authorize the disbursement of value in 
exchange for funds (Step 1). Authorization system 80 may comprise a first 
load/unload authentication source 88 having the load keys A and Z for both an open 
purse application 28 (load key A) and a closed purse application 30 (load key Z). For 
example, first load/unload authentication source 88 may comprise a financial 
institution or the government. Also, authentication system 80 may comprise a second 
load/unload authentication source 90, having only load key Z for closed purse 
application 30. For example, second load/unload authentication source 90 may 
comprise a private authority that manages a particular closed purse application, like 
MTA 74. Authorization system 80 interacts with smart card 12 to transfer value to 
applications 28, 30 (Step 2) based on the amount of funds transferred to funding 
source 86. For example, the bin number and transaction amount associated with each 
transaction may be part of the transaction information that is ultimately sent to 
settlement system 92 as part of the settlement process (Step 3). 

Once smart card 12 is loaded with value, then it can be utilized in value 
exchange transactions within purchase system 82 (Step 4) or within other unload 
systems (not shown), such as with the government and financial institutions. 
Purchase system 82 may comprise a first purchase device 94 having the purchase keys 
A and Z for both open purse application 28 (load key A) and closed purse application 
30 (load key Z). For example, first purchase device 94 may comprise a terminal 
associated with a particular closed purse application, like MTA 74. Also, purchasing 
system 82 may comprise a second purchasing device 96, having only load key Z for 
closed purse application 30. For example, second purchase device 96 may comprise a 
point-of-sale merchant terminal at a grocery store where purchase key Z is associated 
with a closed purse application such as electronic food stamps. In this example, the 
distribution of purchase key Z is limited only to approved grocery stores so that the 
value in the electronic food stamp application may not be used for any purchases other 
than food. Purchasing system 82 interacts with smart card 12 to transfer value from 
applications 28, 30 (Step 4) based on the transaction amount. For example, the bin 
number and transaction amount associated with each transaction may be part of the 
transaction information that is ultimately sent to settlement system 92 as part of the 
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. The lines having double-arrowheadsbel 



settlement process (Stepo). The lines having double-arrpwheadsbetween settlement 
system 92 and both authentication system 80 and purchasinjfsystem 82 represent the 
accounting performed by the system to properly settle all of the transactions. For 
example, upon receiving funds from funding source 86, load/unload authentication 
5 sources 88 and 90 may transfer the funds to settlement system 92 for allocation to 
open purse pool 98 or closed purse pool 100, depending in the bin number associated 
with the transaction. Upon receiving the transaction information from purchasing 
devices 94 and 96, settlement system 92 then debits the appropriate pool 98 or 100 
and credits the appropriate purchasing device based on the transaction amount and bin 

10 number associated with the purchase transaction. Settlement system 92 then balances 
the value in each pool (Step 6). Alternatively, load/unload authentication sources 88 
and 90 may keep the value but send an accounting to settlement system 92. Upon 
resolving a purchase transaction, settlement system 92 may then debit the appropriate 
load/unload authentication source 88, 90, based on the transaction amount and the 

15 associated bin number, and credit the appropriate purchasing device 94, 96. As 

discussed above, the present invention advantageously provides for the seamless use 
of either open purse application 28 or closed purse application 30 within transaction 
network 84, as all transactions are formatted to be compatible with the settlement 
system 92 of the back end computer systems 22 of the open purse application. 



Although the invention has been described with reference to these preferred 
embodiments, other embodiments can achieve the same results. Variations and 
modifications of the present invention will be apparent to one skilled in the art and the 
following claims are intended to cover all such modifications and equivalents. 
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